from the quill of Michael Richardson <[EMAIL PROTECTED]> on
scroll <[EMAIL PROTECTED]>
>
> That would be interesting, but wouldn't really work.
> You may have multiple types of traffic on any given network.
Yes, in general, that is probably correct, but in the case of
encapsulation, such as PPPoE is, probably not, don't you think? I think
there are some situations where it can be safely assumed that only one
type of encapsuation is going on.
> The only way that I see in the current tcpdump framework would be
> for there
> to be another flag to indicate some additional offset before the layer
> 3
> stuff.
I thought of that.
> Ethereal has some other mechanisms,
Really? Like what? Ethereal is really what I was trying to use before
I saw tcpdump had the same problem, which is no surprise seeing as they
are both using the same packet capture mechanism.
b.
--
Brian J. Murrell
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
